pkg:Bitnami/hyperledger-fabric-orderer
6 total CVEsHIGH4MEDIUM1
✅ Check your installed version
All known vulnerabilities
HIGH7.5CVE-2022-45196Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by repeatedly sending a crafted channel tx with the sa… >= 2.3.0, < 2.3.1
from 0, < 2.2.7, >= 2.3.0, < 2.4.5
HIGH7.1CVE-2023-46132Crosslinking transaction attack in hyperledger/fabric >= 1.0.0, < 2.2.14, >= 2.3.0, < 2.5.5
HIGH7.0Remote denial of service in Hyperledger Fabric Gateway
from 0, < 2.4.6
MEDIUM5.4Hyperledger Fabric does not verify request has a timestamp within the expected time window in github.com/hyperledger/fabric
from 0, < 2.5.10
—fabric-sdk-java has ObjectInputStream.readObject() without ObjectInputFilter, which allows Java deserialization RCE
>= 1.0.0, < 2.5.9